* initial fixes for dashboard permission acl list query, fixes #10864 * permissions: refactoring of acl api and query